Vendor
Qualcomm
3,001 known vulnerabilities.
Products
96 results · Clear filters · Feed
-
Critical 9.8
Improper authorization in Qualcomm Software Center
Improper authorization leads to Remote Code Execution via SocketIO interface.
-
Critical 9.6
Stack-based Buffer Overflow in WLAN Firmware
Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values.
-
Critical 9.6
Incorrect authorization in PLC FW
Buffer overflow due to incorrect authorization in PLC FW
-
Critical 9.0
Buffer Copy Without Checking Size of Input in Boot
Memory Corruption when a corrupted ELF image with an oversized file size is read into a buffer without authentication.
-
Critical 9.8
Improper Validation of Array Index in Multi-Mode Call Processor
Memory corruption while selecting the PLMN from SOR failed list.
-
Critical 9.8
Improper Restriction of Operations within the Bounds of a Memory Buffer in Data Network Stack & Connectivity
Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs.
-
Critical 9.1
Improper Authentication in GPS_GNSS
Cryptographic issue occurs due to use of insecure connection method while downloading.
-
Critical 9.8
Improper Validation of Array Index in WLAN Host Communication
Memory corruption while parsing the ML IE due to invalid frame content.
-
Critical 9.8
Improper Authentication in Core
Initial xbl_sec revision does not have all the debug policy features and critical checks.
-
Critical 9.8
Improper Input Validation in WLAN Resource Manager
Memory corruption while redirecting log file to any file location with any file name.
-
Critical 9.3
Buffer Copy Without Checking Size of Input in Hypervisor
Memory corruption in Hypervisor when platform information mentioned is not aligned.
-
Critical 9.1
Improper Authentication in Multi-Mode Call Processor
Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command.
-
Critical 9.3
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in TZ Secure OS
Memory corruption in TZ Secure OS while Tunnel Invoke Manager initialization.
-
Critical 9.8
Improper Input Validation in WIN SON
Memory corruption while redirecting log file to any file location with any file name.
-
Critical 9.8
Use of Out-of-range Pointer Offset in WLAN HOST
Memory corruption while parsing beacon/probe response frame when AP sends more supported links in MLIE.
-
Critical 9.8
Use After Free in WLAN Host Communication
Memory corruption while processing MBSSID beacon containing several subelement IE.
-
Critical 9.8
Buffer Copy Without Checking Size of Input in Data Modem
Memory corruption in Data Modem while verifying hello-verify message during the DTLS handshake.
-
Critical 9.3
Improper Input Validation in Services
Memory corruption in Core Services while executing the command for removing a single event listener.
-
Critical 9.3
Buffer copy without checking size of Input in Core
Memory corruption in Core while processing control functions.
-
Critical 9.3
Integer Overflow or Wraparound in TZ Secure OS
Memory corruption in TZ Secure OS while requesting a memory allocation from TA region.
-
Critical 9.3
Buffer Copy without Checking Size of Input in HLOS
Memory corruption in HLOS while running playready use-case.
-
Critical 9.8
Buffer Copy without Checking Size of Input in Data Modem
Memory corruption in Data Modem when a non-standard SDP body, during a VOLTE call.
-
Critical 9.8
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Host
Memory corruption in WLAN Host while processing RRM beacon on the AP.
-
Critical 9.8
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Host
Memory corruption while sending an Assoc Request having BTM Query or BTM Response containing MBO IE.
-
Critical 9.1
Improper Authentication in GPS HLOS Driver
Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data.
-
Critical 9.8
Buffer Copy Without Checking Size of Input in WLAN Firmware
Memory corruption in WLAN Firmware while parsing a NAN management frame carrying a S3 attribute.
-
Critical 9.0
Improper Input Validation in Core
Memory corruption in core services when Diag handler receives a command to configure event listeners.
-
Critical 9.8
Use of Out-of-range Pointer Offset in Multi-mode Call Processor
Memory Corruption in Multi-mode Call Processor while processing bit mask API.
-
Critical 9.3
Improper Input Validation in Core
Memory Corruption in Core during syscall for Sectools Fuse comparison feature.
-
Critical 9.8
Buffer Copy without Checking Size of Input in WLAN Firmware
Memory corruption in WLAN Firmware while doing a memory copy of pmk cache.
-
Critical 9.1
Improper Authentication in Data Modem
Cryptographic issue in Data Modem due to improper authentication during TLS handshake.
-
Critical 9.8
Use of Out-of-range Pointer Offset in Modem
Memory corruption in Modem while processing security related configuration before AS Security Exchange.
-
Critical 9.8
Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN Firmware
Memory corruption in WLAN Firmware while parsing receieved GTK Keys in GTK KDE.
-
Critical 9.8
Buffer Copy Without Checking Size of Input in QESL
Memory corruption while handling payloads from remote ESL.
-
Critical 9.8
Buffer Copy Without Checking Size of Input in QESL
Memory corruption in QESL while processing payload from external ESL device to firmware.
-
Critical 9.3
Incorrect Type Conversion or Cast in Core
Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE.
-
Critical 9.1
Untrusted Pointer Dereference in Automotive
Memory corruption due to untrusted pointer dereference in automotive during system call.
-
Critical 9.8
Buffer copy without checking size of input in Audio.
Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder.
-
Critical 9.3
Buffer copy without checking the size of input in Core
Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection information.
-
Critical 9.3
Integer overflow or wraparound in Core
Memory corruption due to integer overflow or wraparound in Core while DDR memory assignment.